
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: Rq0bhNpsHvaslfasl9PGlBYVirixVKJTpEIOmvEgRho=
Subject key identifier: B4:29:2E:FA:D9:4D:62:77:80:C1:40:54:DA:C4:67:19:F8:36:2A:88
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 353A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 353A
Signing time: Tue 12 May 2026 15:15:18 +0000
Manifest this update: Tue 12 May 2026 15:15:18 +0000
Manifest next update: Tue 19 May 2026 15:15:18 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: ohHfZ54puHRkTP4+br9qxLTT5kAuI0LDbgUPjZq2cSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13626 (0x353a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: May 12 15:15:18 2026 GMT
Not After : May 19 15:15:18 2026 GMT
Subject: CN=6a034406-5cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:39:3e:e2:cd:24:6d:0a:3a:33:cd:4f:6b:
d4:3f:77:f4:43:07:70:89:6d:33:b0:c1:64:de:ed:
49:86:04:5a:a9:22:f7:9a:e5:78:a8:70:b5:60:bc:
b0:4d:e2:93:95:2d:44:49:72:fe:8d:9d:c9:e4:41:
48:8b:67:72:1c:48:1a:2c:d8:2c:68:f0:05:22:ee:
6d:11:ae:70:a7:51:d9:0b:9c:7d:c5:50:ee:ac:ed:
00:f4:d4:a1:ee:29:4a:ba:ff:57:d0:70:03:9d:bb:
b9:66:83:8a:92:c7:31:d7:33:d0:68:f6:b3:ce:9f:
d1:69:b9:40:d8:54:b8:7c:4b:34:4a:0e:4c:a7:a5:
65:9e:ff:d9:2d:4d:57:d7:d9:35:1e:b3:68:07:18:
e9:72:75:64:74:59:a4:f7:4f:30:e5:1e:c3:26:eb:
b5:88:b2:d2:ed:c5:bc:38:cb:9d:12:6a:45:62:72:
5e:fe:d5:b6:02:be:c0:33:34:f2:db:71:60:89:31:
11:7e:14:cd:73:e1:bc:31:11:e9:85:ad:7b:66:70:
70:eb:ee:c9:51:90:44:d8:ab:4c:e3:70:da:45:32:
44:48:48:29:e0:47:6b:9c:38:47:40:ba:c0:00:8c:
af:b7:eb:7a:22:be:51:b9:57:3b:8b:15:97:7d:ef:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:2E:FA:D9:4D:62:77:80:C1:40:54:DA:C4:67:19:F8:36:2A:88
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:9b:8c:17:86:73:94:db:fc:ce:4f:c4:64:aa:37:c5:2a:
72:33:2b:23:1a:ed:0e:c4:b1:23:44:47:07:8d:77:7c:d4:dc:
11:32:f1:68:da:67:d0:fa:21:26:81:16:59:f0:9c:99:fc:17:
f2:e8:a3:88:5b:0b:1c:3a:25:6c:6c:5f:b8:51:d2:2e:01:c1:
93:87:ef:2f:45:45:18:f3:e6:2e:36:3a:f5:01:99:9c:5d:30:
96:88:28:b7:c1:e8:56:ee:0d:36:13:98:3b:50:fc:14:31:58:
b8:cc:a7:19:72:27:73:27:37:b5:17:bf:63:ca:e9:06:94:89:
36:80:e1:39:43:cc:3d:f7:68:e4:06:a4:7f:47:3e:04:d4:36:
01:82:a2:c1:79:d1:92:95:53:d3:05:5f:d1:af:d5:f0:a8:38:
b8:45:5b:96:39:bd:38:05:d1:b5:fe:dd:11:7f:95:af:27:13:
e7:e7:67:9f:ba:cd:f6:7b:7d:75:87:cd:a9:48:00:c9:3c:b1:
3c:74:71:34:60:6b:e7:cc:a2:22:6a:58:e5:fe:dd:e1:27:24:
77:dd:7d:a5:60:85:da:4a:8b:93:66:35:a8:93:84:c5:1e:31:
b5:24:13:92:18:73:95:5c:be:65:b8:5c:fc:80:db:8b:7d:80:
78:bb:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:01 2026 by rpki-client